This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/8sek3R_CiH2Ce26peT_yPJJM1Q4.roa File: 8sek3R_CiH2Ce26peT_yPJJM1Q4.roa (raw, json) Hash identifier: MMoHl1B7kl6idkVB+mLHeo7h0pXBE+uaRVofbjNMtN0= Subject key identifier: F2:C7:A4:DD:1F:C2:88:7D:82:7B:6E:A9:79:3F:F2:3C:92:4C:D5:0E Certificate issuer: /CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad Certificate serial: 019AC0A0319ED5989CF8A52916D99E6C75EC Authority key identifier: 97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/8sek3R_CiH2Ce26peT_yPJJM1Q4.roa Signing time: Wed 26 Nov 2025 14:45:15 +0000 ROA not before: Wed 26 Nov 2025 14:45:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 198949 IP address blocks: 141.226.110.0/24 maxlen: 24 141.226.252.0/22 maxlen: 24 144.249.128.0/18 maxlen: 24 167.17.128.0/19 maxlen: 24 185.139.240.0/22 maxlen: 24 2a07:1980::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c0:a0:31:9e:d5:98:9c:f8:a5:29:16:d9:9e:6c:75:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad Validity Not Before: Nov 26 14:45:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f2c7a4dd1fc2887d827b6ea9793ff23c924cd50e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5e:c0:e8:20:31:57:cc:cf:24:28:0f:97:69: 94:95:b0:cf:a8:f8:ee:19:05:0b:50:75:46:ac:e3: e5:02:72:7b:a2:97:52:d2:19:b2:4f:27:4f:c2:a2: 3d:a6:9a:36:d1:cc:9f:6c:a7:3e:f9:d0:25:33:f6: 0a:8e:25:55:26:ae:d4:07:8f:2b:4f:90:17:fa:de: 4f:e3:b4:cd:26:f1:f6:d8:5a:2d:fd:09:06:eb:04: c3:61:2b:23:95:b3:14:62:78:c9:1f:ce:6d:2d:e0: ce:c2:78:21:b4:da:ed:4d:f0:ff:42:97:96:03:f0: a9:5c:c9:b1:44:12:af:06:47:f4:02:f6:2e:4b:7c: c6:77:b6:be:a6:bf:e2:5e:fc:31:fe:cf:c3:45:21: 6c:16:e5:db:3a:a1:5b:e1:46:e5:39:07:c8:fb:c7: 3e:23:5d:0f:2a:31:5a:e8:e5:bf:9a:32:96:c9:bb: 82:9d:03:06:b4:7f:73:93:38:1f:64:97:a5:7a:67: a7:1f:69:dc:0a:ae:c5:9b:3d:3b:60:f0:c4:16:21: a1:af:24:a7:46:5d:ec:65:2c:d2:f8:f0:ca:49:69: 14:e9:fb:95:f8:a3:4f:a7:97:a4:ca:7e:9a:79:bd: e0:97:90:fa:6f:bf:18:e7:a8:a5:23:df:53:73:a7: 18:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C7:A4:DD:1F:C2:88:7D:82:7B:6E:A9:79:3F:F2:3C:92:4C:D5:0E X509v3 Authority Key Identifier: keyid:97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/8sek3R_CiH2Ce26peT_yPJJM1Q4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.226.110.0/24 141.226.252.0/22 144.249.128.0/18 167.17.128.0/19 185.139.240.0/22 IPv6: 2a07:1980::/29 Signature Algorithm: sha256WithRSAEncryption 12:d7:da:33:6e:cd:12:31:56:0b:11:6f:80:9c:7e:fc:bb:58: a3:2b:79:3e:b7:15:a4:34:93:d3:e0:84:ea:dc:8d:33:03:1f: 87:e2:35:e3:0c:97:94:64:f7:ee:f6:46:91:2e:a4:df:4e:de: 69:1d:6c:4c:1f:0f:39:f9:1f:4d:4a:80:f4:ac:0b:73:f6:f0: 71:ac:66:f2:81:78:93:0d:e6:76:2e:ec:d2:12:79:a2:59:d8: 4d:cb:10:3b:6a:8e:c5:87:51:f3:ba:36:f8:a4:83:14:83:1d: 45:be:8b:b6:22:ac:02:50:64:f4:a0:26:f1:cf:4d:d7:ac:78: 71:ba:ac:b6:23:95:11:1f:77:39:88:c7:81:c9:26:d2:ba:0a: d8:c2:14:4c:3a:d8:71:c3:e9:07:f0:62:05:ca:3f:51:1c:1a: d2:72:f4:8e:d8:7b:5e:3f:2a:9e:3c:7e:cd:a1:f6:3c:4b:b5: f1:4d:82:b9:56:93:3e:a0:f0:d6:e8:22:1b:9c:21:6b:cd:e8: ee:5b:a3:37:e7:02:35:0b:4e:9b:27:ee:5f:51:f4:28:ba:af: 6b:44:cd:18:62:ec:08:f5:28:43:a8:5e:c2:ad:26:bb:62:86: e1:3e:9e:03:32:d8:c9:0b:0b:7f:73:a1:6d:a8:28:e1:0a:a4: e2:a3:ef:f9 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZrAoDGe1Zic+KUpFtmebHXsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3YmQ5Yjg2NTMxZTU0NGFmYTAzMDlkOGJlMmE3YmE2OTE2 M2Y5YWQwHhcNMjUxMTI2MTQ0NTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmM3YTRkZDFmYzI4ODdkODI3YjZlYTk3OTNmZjIzYzkyNGNkNTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr17A6CAxV8zPJCgPl2mUlbDPqPju GQULUHVGrOPlAnJ7opdS0hmyTydPwqI9ppo20cyfbKc++dAlM/YKjiVVJq7UB48r T5AX+t5P47TNJvH22Fot/QkG6wTDYSsjlbMUYnjJH85tLeDOwnghtNrtTfD/QpeW A/CpXMmxRBKvBkf0AvYuS3zGd7a+pr/iXvwx/s/DRSFsFuXbOqFb4UblOQfI+8c+ I10PKjFa6OW/mjKWybuCnQMGtH9zkzgfZJelemenH2ncCq7Fmz07YPDEFiGhrySn Rl3sZSzS+PDKSWkU6fuV+KNPp5ekyn6aeb3gl5D6b78Y56ilI99Tc6cYcwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFPLHpN0fwoh9gntuqXk/8jySTNUOMB8GA1UdIwQY MBaAFJe9m4ZTHlRK+gMJ2L4qe6aRY/mtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kNGJkOGItNTVmNC00NzY1LWFkMjIt MzQ2MGNjMjY0ODBiLzEvOHNlazNSX0NpSDJDZTI2cGVUX3lQSkpNMVE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9kNGJkOGItNTVmNC00NzY1LWFkMjItMzQ2MGNjMjY0ODBi LzEvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQAjeJuAwQC jeL8AwQGkPmAAwQFpxGAAwQCuYvwMA0EAgACMAcDBQMqBxmAMA0GCSqGSIb3DQEB CwUAA4IBAQAS19ozbs0SMVYLEW+AnH78u1ijK3k+txWkNJPT4ITq3I0zAx+H4jXj DJeUZPfu9kaRLqTfTt5pHWxMHw85+R9NSoD0rAtz9vBxrGbygXiTDeZ2LuzSEnmi WdhNyxA7ao7Fh1Hzujb4pIMUgx1Fvou2IqwCUGT0oCbxz03XrHhxuqy2I5URH3c5 iMeBySbSugrYwhRMOthxw+kH8GIFyj9RHBrScvSO2HtePyqePH7NofY8S7XxTYK5 VpM+oPDW6CIbnCFrzejuW6M35wI1C06bJ+5fUfQouq9rRM0YYuwI9ShDqF7CrSa7 YobhPp4DMtjJCwt/c6FtqCjhCqTio+/5 -----END CERTIFICATE-----Generated at Sat Dec 6 16:52:24 2025 by rpki-client